planontest.bitmarck.de

Issued by AlphaSSL CA - SHA256 - G4

About this certificate

This digital certificate with serial number 56:af:89:84:5a:5f:42:7a:da:bb:79:10 was issued on by GlobalSign nv-sa.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=planontest.bitmarck.de

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 56:af:89:84:5a:5f:42:7a:da:bb:79:10
Serial Number (int): 26827922268758603568584030480
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: b7:5c:d0:27:f1:64:4a:fa:dd:16:5c:aa:8c:82:66:b2:5d:78:98:68
AuthorityKeyId: 4f:cb:ac:a8:c2:ef:ab:dd:83:6f:6b:bf:ce:98:3d:5c:58:25:76:15

Fingerprint (sha1): 9a:4e:cc:d0:df:d3:12:62:80:3c:11:bf:e8:85:2d:f5:ec:b7:51:8b
Fingerprint (sha256): 2e:27:70:3d:ff:53:8f:16:dd:a6:d3:83:f9:df:18:06:b7:ae:b7:1d:f1:f5:45:d9:60:f9:56:67:c7:87:b3:21

Issuing Certificate URL: http://secure.globalsign.com/cacert/alphasslcasha256g4.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/alphasslcasha256g4
CRL Distribution Point: http://crl.globalsign.com/alphasslcasha256g4.crl

Check the revocation status for certificate planontest.bitmarck.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for planontest.bitmarck.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

planontest.bitmarck.de

Other certificates including the domain name bitmarck.de

(limited to 100 certificates)
meindev.bitmarck.de
mein.bitmarck.de
wlc.bitmarck.de
apigwdu.bitmarck.de
meindev.bitmarck.de
gokv.bitmarck.de
webapp.bitmarck.de
dev.bitmarck.de
webmail.bitmarck.de
bitforecast.bitmarck.de
da-dak.bitmarck.de
bitforecast.bitmarck.de
bewerber.bitmarck.de
www.bitmarck.de
services.bitmarck.de
www.bitmarck.de
mein.bitmarck.de
dev.bitmarck.de
csa1.bitmarck.de
www.bitmarck.de
vcsebravo.bitmarck.de
luke.bitmarck.de
vcsebravo.bitmarck.de
meinftp.bitmarck.de
bewerber.bitmarck.de
webapp.bitmarck.de
webapp.bitmarck.de
more.bitmarck.de
apigwpu.bitmarck.de
dev.bitmarck.de
vcsecharlie.bitmarck.de
planontest.bitmarck.de
jira.bitmarck.de
www.bitmarck.de
siplync.bitmarck.de
www.bitmarck.de
da-dak.bitmarck.de
mein.bitmarck.de
dev.bitmarck.de
*.bitmarck.de
services.bitmarck.de
da-mad.bitmarck.de
owa-muc.bitmarck.de
sierra.bitmarck.de
bewerber.bitmarck.de
more.bitmarck.de
owa-muc.bitmarck.de
meindev.bitmarck.de
*.bitmarck.de
www.bitmarck.de
*.mein.bitmarck.de
planon.bitmarck.de
more.bitmarck.de
www.bitmarck.de
mein.bitmarck.de
mein.bitmarck.de
devservices.bitmarck.de
bravo01.bitmarck.de
webmail.bitmarck.de
da-mad.bitmarck.de
bitforecast.bitmarck.de
webvpn.bitmarck.de
beispielservice.bitmarck.de
www.bitmarck.de
mein.bitmarck.de
www.bitmarck.de
services.bitmarck.de
meinportal.bitmarck.de
dev.bitmarck.de
www.bitmarck.de
rds.bitmarck.de
mein.bitmarck.de
webvpn2.bitmarck.de
leia.bitmarck.de
meindev.bitmarck.de
wlc.bitmarck.de
webapp.bitmarck.de
webvpn.bitmarck.de
dak.bitmarck.de
vcsecharlie.bitmarck.de
dev.bitmarck.de
bewerber.bitmarck.de
meinftp.bitmarck.de
wamitsmselfservice.bitmarck.de
securemail.bitmarck.de
apigwtu.bitmarck.de
vcsecharlie.bitmarck.de
selfservice.bitmarck.de
vcsecharlie.bitmarck.de
www.bitmarck.de
www.bitmarck.de
*.bitmarck.de
mein.bitmarck.de
www.bitmarck.de
travelerhek.bitmarck.de
www.bitmarck.de
meindev.bitmarck.de
mein.bitmarck.de
uemwebapi.bitmarck.de
more.bitmarck.de

Certificate

The complete raw certificate details for planontest.bitmarck.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAibaehSiHvUMkxOgAY/xh
9niyZOMW73ENppy3wGRbx8M6r6RUtWMLO4EvmipFeazFkk998Yc6zO6rIEFKULJo
FaZ6/JTMpaK13RJvpzLSztVexi4bax18HF1oKIKZl2zF9g9J8DPCyVRutrsiOlfU
djLLPkA4hnDJkAzp8pPLkWEYUq3+85b1EHKZHF+qR3VLWisA3bjnJ5VK1dBKnX90
T1t71qAYb9nD+ngid02094TNDeOd5RD4oG3pVQuag32/GvAqmNvWncQ9QKgHhbBA
T2e8IOvvXZtYKYUyS6NPS7B3I5IjrKuAuHXQY6nMwu+1o9vZLFclKrp2I5bohQ/P
9WMSEHBzT5ZncNscxteg/YgaG1K/uWXhhQH2B456hwT0dcBJF12u4d64T+PyxtRo
QZG/56MxqT4DwbKdrU8YDQ+Jxqu2TQ6JwAkN/9vrbj+uVPxJTzxEq4XTWB3YqPpG
IRs2o3I7KnIgRdfL/4y9+MpMWLEfU12wlej+mpwsXnArdPeEG4kZtL8UGFdFihZZ
N5sHJZsqHlqEH/w06UQULNYHK5fma/lIs1NFQtWrdwwn7Lgv0bBTVzCbkCNbvCjq
65iaa3FRf/547zi/I9a6TASfDOcHznaiahKTY7l1vLTVCFGDf1T9/kKzQTBtnNHX
mWgTLrzGmmEk3m5jL6xHwh0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 26827922268758603568584030480
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-22 07:43:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-22 07:43:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'planontest.bitmarck.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 561821477220575441650994224841141273313692589285494410913421997394443106911477841948167009376986706940261243367119282189482555806988374007120120049804866924427274176911679533552385365436563027756448215470369613200052106607225773917728178821829749734766909332981844639026683317585123180291508201008874560671428442430950144682408193394884460270488053219779096878906190665091741894509105571677349420778582934549114200310541281155196097968417607289665816049990371634696411243562940877072896943600686545062213733881313615451943447473643385715302247572890559833079612733455006770859997237618233186551668491324815624278212693003039907050450043881444776234613551679587842369647491176389001626421234170589357454690260205988842707985618725416040280337227265921847191234855702040030011263697791393941180447299998279596743837167801643246744006698901491436711896930869338228633714710130944519247933196335901182839203253544833879323007107585919016303453189556789704425390401406220794797855426485721440637545400505153984939467481540495009182969256157983846045728447985230967852389531612777243007245690351955718018331941031789683107194288860687321427606964382626154507565805118937361733057113512560626722340275868117205992281606786532491775214862877
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (134 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/alphasslcasha256g4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/alphasslcasha256g4'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/alphasslcasha256g4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planontest.bitmarck.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4fcbaca8c2efabdd836f6bbfce983d5c58257615
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b75cd027f1644afadd165caa8c8266b25d789868
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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